
What Is claimed is ; 

1. A master digital data creation device comprising: 

an encryption block generating a first control word based 
5 on a specified allowable number of reproductions and applying 
a one-way function to the first control word the allowable 
number of reproductions to generate a second control word; 

a scrambler receiving the second control word for 
scrambling desired first digital data using the second control 
10 word to produce second digital data; and 

an output block outputting the second digital data and 
the first control word to an external device. 
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2- A digital data reproduction device comprising: 
15 an acceptor accepting recording media on which second 

5' digital data and a first control word CWr are recorded, said 

first control word being generated based on a specified 
allowable number of reproductions, said second digital data 
S being generated by scrambling desired first digital data using 

□20 a second control word CWo generated by applying a one-way 
function to the first control word CWr k times; 

a decryption block receiving the first control word CWk 
and applying the one-way function to the first control word 
CWk k times to produce the second control work CWo; 
25 a de- scrambler receiving the second digital data and 

the second control word CWo and de- scrambling the second digital 
data using the second control word CWq to produce the first 
digital data; and 

a reproduction unit reproducing the first digital data 
30 generated by said de- scrambler , 

wherein, after the reproduction by said reproduction 
unit , said decryption block writes a third control word CW(k-i) 
back to said recording media, said third control word CW(k_i) 
being generated by applying the one-way function to the first 
35 control word CWk once, and wherein, if the first control word 
CWk received from the recording media equals the second control 
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word CWo, the de- scrambling by said de- scrambler and the 
reproduction by said reproduction unit are inhibited. 

3 . The digital data reproduction device according to 
5 claim 2, wherein, when a desired number of reproductions, n, 
is received from some other reproduction device, said 
decryption block receives the first control word CWk from the 
recording media and, if k^n, applies the one-way function 
to the first control word CWk (k-n) times to produce the third 
10 control word CWn and applies the one-way function to the first 
control word CWr n times to produce the fourth control word 
CW(k_n); if k<n, produces the first control word CWr as the third 
control word CWn and produces the second control word CWo as 
the fourth control word CW(x-n) ; and records the fourth control 
|i 15 word CW(k-n) on the recording media for updating, further 
comprising: 
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an output block outputting the second digital data 
^ recorded on the recording media, and the third control word 

CWn obtained from the decryption block, to the other 
O 20 reproduction device. 
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